Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json)
Hash identifier: uPJ/b5zyK5NHm9c9/7J8owZBiFrFYTt4g9SksG5EVg4=
Subject key identifier: A7:2A:CD:61:C6:6C:49:2C:D3:F9:3D:4E:67:75:14:5C:AA:12:02:3C
Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Certificate serial: 019CAA216F1D651EBFFC87CD083DF78C8AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 16:00:43 +0000
Manifest this update: Sun 01 Mar 2026 16:00:43 +0000
Manifest next update: Mon 02 Mar 2026 16:00:43 +0000
Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: n2Ox0ZYR/5F26Z/FejOZ7S959bKgNaPibsIaCjnuXSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:6f:1d:65:1e:bf:fc:87:cd:08:3d:f7:8c:8a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0
Validity
Not Before: Mar 1 16:00:43 2026 GMT
Not After : Mar 2 16:00:43 2026 GMT
Subject: CN=a72acd61c66c492cd3f93d4e6775145caa12023c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:80:85:01:ec:e3:10:dc:62:3d:f7:0f:6d:
3a:52:54:71:82:68:05:4e:df:0e:4c:7c:be:b1:08:
30:e4:4c:54:2a:f0:39:48:3e:a1:a0:72:ae:21:b4:
cf:39:9c:c9:eb:a4:57:58:2d:04:45:0b:99:93:5a:
c6:2e:10:be:73:1b:bc:bc:9e:fd:87:30:8f:ac:70:
fa:2b:26:09:69:8e:e7:d0:84:13:8f:57:e6:e4:0f:
a7:73:bd:dc:17:23:cc:b9:67:2b:23:a2:09:83:87:
5d:1d:6e:d6:c4:1e:5d:7a:17:05:39:af:75:e0:c8:
cd:49:f3:1e:00:e8:a9:fc:9c:f2:2c:84:af:8b:cf:
35:23:62:76:c7:2f:0d:ab:fe:8d:ad:c3:80:65:14:
bd:45:7a:6d:a8:8a:d3:40:e0:40:08:f6:26:4a:af:
3e:b2:d3:f5:df:99:8b:34:e3:ab:83:42:15:12:98:
93:47:ea:1d:36:24:2d:1d:26:9f:a7:1a:3e:14:fa:
a4:87:c9:5a:36:19:f9:59:fe:52:94:b7:90:28:7a:
f7:63:cd:0d:b7:f7:05:69:6a:65:1a:57:74:4d:45:
4f:00:fc:40:e7:18:3c:55:c2:ed:cc:10:78:41:13:
ae:ea:b7:ff:8d:61:b9:b6:bb:dc:9b:a7:3e:3a:2d:
b5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2A:CD:61:C6:6C:49:2C:D3:F9:3D:4E:67:75:14:5C:AA:12:02:3C
X509v3 Authority Key Identifier:
keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:06:57:9e:8f:f3:a2:02:ac:8c:4c:05:31:67:c3:57:a5:cd:
c2:53:b7:6c:64:ae:b7:45:14:d3:1d:ab:1a:c4:7b:9b:55:7d:
8d:22:10:4b:ec:a5:0a:59:35:1f:d6:ec:ee:f0:87:35:e0:4e:
49:59:29:5d:c5:98:4b:25:c5:0a:cd:8c:8e:ce:46:31:b4:49:
08:42:bd:38:13:be:15:71:e3:db:8c:50:d4:c5:9a:a5:fb:2f:
16:a0:54:51:98:be:4d:08:c2:42:b5:c5:bb:d0:a3:d6:56:13:
89:76:cc:59:4c:5b:ba:31:58:54:5a:24:9d:21:56:e1:10:45:
59:f0:bf:9e:2a:43:cc:14:be:c7:45:c7:0c:f6:49:a5:33:f7:
f8:55:e5:45:a3:d9:26:5c:c8:e2:a7:59:4c:9f:34:3e:14:07:
aa:34:fe:82:fa:eb:1b:ce:ab:90:ee:a0:86:c1:bd:ee:98:41:
18:9b:51:0a:b3:63:23:cf:3f:e7:39:3b:25:b1:0e:d8:c7:b4:
22:90:60:a4:2c:0e:af:32:f8:df:a7:e9:80:1b:d2:e7:9e:b5:
ed:37:46:c1:35:e0:0e:a7:9f:6f:e4:7d:a4:67:00:e4:8a:de:
c6:2a:37:82:c7:a7:c7:7e:c9:a8:6e:b4:d0:ea:77:b5:bf:21:
97:66:5f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:27 2026 by rpki-client